EIP-2026-115757

This exploit demonstrates a CSRF vulnerability in Microsoft Outlook Web Access for Exchange Server 2003. It crafts a malicious form that, when loaded, submits a POST request to create a forwarding rule, allowing an attacker to exfiltrate emails to an external address.